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AMENDMENTS TO THE CLAIMS 
Claims 1-13 previously cancelled. 

14. (Original) A cryptographic device which encrypts input data by sequentially 
processing it fay a plurality of round processing which nonlinearly transforms it using extended 
key, comprising: 

an initial splitting part which splits said input data to two pieces of block data; 
a key storage part for storing extended key; 

a plurality of cascade-connected round processing parts which are supplied with 
said two pieces of block data and sequentially process them using said extended key; and 

a final combining part which combines two pieces of block data output from the 
last round of said plurality of cascade-connected round processing parts into a single piece of 
data and outputs it; 

wherein each of said pliirality of round processing part comprises: 

a non-linear fimction part which transforms one of two pieces of block data input 
thereto from the preceding stage, depmding on extended key stored in said key storage part; 

a linear operation part which linearly operates the output data from said nonlinear 
function part and the other of said two pieces of block data; and 

a swapping part which swaps the output data from said linear operation part and 
the input block data to said nonlinear function part and provides the two pieces of swapped data 
as two pieces of input block data to said round processmg part of the next round; and 

wherein said nonlinear function part comprises: 
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a key-dependent linear transformation part which linearly transfonns input data 
based on extended key stored in said key storage part to thereby generate transformed data; 

a splitting part which split the transformed data from said key-dependent linear 
transformation part to a plurality of bit strings; 

a plurality of first nonlinear transformation parts which nonlinearly transform said 
plurality of bit strings, respectively, and output transformed data; 

a first linear transformation part which linearly transforms said transformed data 
from said plurality of first nonlinear transformation parts in association with each other and 
outputs a plurality of pieces of uniformed data to a plurality of routes, respectively; 

a second nonlinear transformation part provided in at least one of said plurality of 
routes, for nonlinearly transforming said transformation parts, and for outputting the transformed 
data as data of that route; and 

a combining part which combines data from said plurality of routes into output 
data of said nonlinear function part. 

15- (Original) The cryptographic device of claim 14, wherein said first linear 
transformation part comprises a key-dependent linear operation part which linearly transforms 
said plurality of pieces of unifomied data based on extended key stored in said key storage part 
and outputs the plurality of transformed data as data of said plurality of routes. 

16, (Original) The cryptographic device of claim 15, further comprising a second 

linear transformation part which linearly transforms the output data from said combining part to 

provide the output data of said nonlinear function part. 
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17. (Currently amended) The cryptographic device of claim 1 6, wherein said second 
linear h:ansformation part is a linear transformation part which performs a linear transformation 
[base don] based on extended key stored in said key storage part, 

18. (Original) The cryptographic device of claim 17, wherein said first linear 
transformation part comprises at least one exclusive OR circuit provided in each of said plurality 
of routes, for outputting said unifoimed data to said each route by an exclusive-OR operation of 
data of said each route and data of other routes. 

1 9. (Original) The cryptographic device of claim 14, further comprising a second 
linear transformation part which lineariy transforms the output data of said combining part to 
provide the transformed data as output data of said nonlinear function part. 

20. (Original) The cryptographic device of claim 19, wherein said second linear 
transformation part is a linear transformation part which performs a linear transformation based 
on extended key stored in said key storage part. 

2 1 . (Original) The cryptographic device of claim 1 9, wherein said first linear 
transformation part comprises at least one exclusive OR circuit provided in each of said plurality 
of routes, for outputting said uniformed data to said each route by an exclusive-OR operation of 
data of said each route and data of other routes. 
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22. (Origmal) The cryptographic device of any one of claims 14 through 2 1 , further 
comprising an initial linear transformation part which linearly transfoims said input data and 
supplies it to said initial splitting part. 

23. (Original) The cryptographic device of claim 22, wherein said initial linear 
transfonnation part is a transformation part which perfonns a linear transforation based on 
extended key stored in said key storage part. 

24. (Original) The cryptographic device of claim 23, further comprising a final linear 
transfomiation part which linearly transforais the output data of said final combining part to 
provide it as the ou^ut of said cryptographic device. 

25. (Original) The cryptographic device of claim 24, wherein said final linear 
transfomiation part is a transfonnation part which perfonns a linear transformation based on 
extended key stored in said key storage part. 

26. (Original) The cryptographic device of claim 22, further comprising a final linear 
transformation part which linearly transforais the output data of said final combining part to 
provide it as the output of said cryptographic device* 



27. (Original) The cryptographic device of claun 26, wherein said final linear 
transformation part is a transformation part which performs a linear transfonnation based 
extended key stored in said key storage part. 
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28. (Original) The cryptographic device of claim 26, wherein said plurality of routes 
are first, second, third and fourth routes arranged in this order. 

29. (Original) The cryptographic device of claim 28, wherein said second nonlinear 
transformation part is provided in each of said four routes. 

30. (Original) The cryptographic device of claim 28, wherein said second nonlinear 
transformation part is provided in each of said first and fourth routes. 

3 1 . (Original) The cryptographic device of claim 30, wherein said first linear 
transformation part comprises: 

a first exclusive OR circuit provided in said second route, for carrying out the 
exclusive-OR between data of said first route and data of said second route; 

a second exclusive-OR circuit provided in said thhxl route, for carrying out the 
exclusive OR between data of said fourth route and data of said third route; 

a third exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between the output of said second exclusive-OR circuit and the output of said first 
exclusive-OR circuit; 

a fourth exclusive-OR circuit provided m said second route, for carrying out the 
exclusive OR between the output of said first exclusive-OR circuit and the output of said third 
exclusive-OR circuit; 
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a fifth exclusive-OR circuit provided in said first route, for carrying out the 



exclusive OR between the output of said first exclusive-OR circuit and the output of said fourth 
excJusive-OR circuit; 



exclusive OR between the data of said fourth route and the output of said third exclusive-OR 
circuit. 



32. (Original) The cryptographic device of claim 23, wherein said plurality of routes 
are first, second, third and fourth routes arranged in this order* 

33. (Original) The cryptographic device of claim 32, wherein said second nonlinear 
transformation part is provided in each of said four routes. 

34. (Original) The cryptographic device of claim 32, wherein said second nonlinear 
transformation part is provided in each of said first and fourth routes. 

35. (Original) The cryptogr^hic device of claim 34, wherein said first linear 
transformation part comprises: 

a first exclusive OR circuit provided in said second route, for carrying out the 
exclusive-OR between data of said first route and data of said second route; 
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a second exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between data of said fourth route and data of said third route; 

a third exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between the output of said second exclusive-OR circuit and the output of said first 
exclusive-OR circuit; 

a fourth exclusive-OR circuit provided in said second route, for carrying out the 
exclusive OR between the output of said first exclusive-OR circuit and the output of said third 
exclusive-OR circuit; 

a fifth exclusive-OR circuit provided in said first route, for carrying out the 
exclusive OR between the data of said first route and the output of said fourth exclusive-OR 
circuit; and 

a sixth exclusive-OR ch>3uit provided in said fourth route, for carrying out the 
exclusive OR between the data of said fourth route and the output of said third exclusive-OR 
circuit. 

36. (Original) The cryptographic device of claims 25, wherein said plurality of routes 
are first, second, third and fourth routes arranged in this order. 

37. (Original) The cryptographic device of claim 33, wherein said second nonlinear 
transformation part is provided in each of said four routes. 

38. (Original) The cryptographic device of claim 33, wherein said second nonlinear 

transformation part is provided in each of said first and fourth routes. 
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39. (Currently amended) The cryptographic device of claim [35] 38, wherein said 
first linear transformation part comprises; 

a first exclusive OR circuit provided in said second route, for carrying out the 
exclusive-OR between data of said first route and data of said second route; 

a second exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between data of said fourth route and data of said diird route; 

a third exclusive-OR circuit provided in said third route> for carrying out the 
exclusive OR between the output of said second exclusive-OR circuit and the output of said first 
exclusive-OR circuit; 

a fourth exclusive-OR circuit provided in said second route, for carrying out the 
exclusive OR between the output of said first exclusive-OR circuit and the output of said third 
exclusive-OR circuit; 

a fifth exclusive-OR circuit provided in said first route, for carrying out the 
exclusive OR between the data of said first route and the output of said fourth exclusive-OR 
circuit; and 

a sixth exclusive-OR circuit provided in said fourth route, for carrying out the 
exclusive OR between the data of said fourth route and the output of said third exclusive-OR 
circuit; 
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40* (Currently amended) The cryptographic device of any one of claims [14 through 
21] 14, 15, 16, 17, 18, 19, 20 or jZl, further comprising a final linear transformation part which 
linearly transforms the output data of said final combining part to provide it as the output of said 
cryptographic device. 

41 . (Original) The cryptographic device of claim 40, wherein said final linear 
transformation part is a transformation part which performs a linear transformation based on 
extended key stored in said key storage part. 

42. (Original) The cryptographic device of claim 40, wherein said plurality of routes 
are first, second, third and fourth routes arranged in this order. 

43. (Original) The cryptographic device of claim 42, wherein said second nonlinear 
transformation part is provided in each of said four routes. 

44. (Original) The cryptographic device of claim 42, wherein said second nonlinear 
transformation part is provided in each of said first and fourth routes. 

45. (Original) The cryptographic device of claim 44, wherein said first linear 
transformation part comprises: 

a first exclusive OR circuit provided in said second route, for carrying out the 
exclusive-OR between data of said first route and data of said second route; 
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a second exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between data of said fourth route and data of said third route; 

a third exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between the output of said second exclusive-OR circuit and die output of said first 
exclusive-OR circuit; 

a fourth exclusive-OR circuit provided in said second route, for carrying out the 
exclusive OR between the output of said first exclusive-OR circuit and the output of said third 
exclusive-OR circuit; 

a fifth exclusive-OR circuit provided in said first route, for carrying out the 
exclusive OR between the data of said first route and the output of said fourth exclusive-OR 
circuit; and 

a sixth exclusive-OR circuit provided in said fourth route, for carrying out the 
exclusive OR between the data of said fourth route and the output of said third exclusive-OR 
circuit. 

46, (Currently amended) The cryptographic device of any one of claims [ 14 through 
21] lA 15, 16, 17, 18, 19, 20 or 21, wherein said plurality of routes are first, second, third and 
fourth routes arranged in this order. 

47. (Original) The cryptographic device of claim 46, wherem said second nonlinear 
transformation part is provided m each of said four routes. 
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48, (Original) The cryptographic device of claim 46, wherein said second nonlinear 
transformation part is provided in each of said first and fourth routes. 

49. (Currently amended) The cryptographic device of claim 48, wherein said first 
linear transformation part comprises: 

a first exclusiv e OR circuit provided in said second route, for carrvinp out thft 
exclusive-OR betwee n data of said first route and data of said second route! 

a [first] sgcond exchisive [Or] OR, circuit provided in said [second] third route, for 
carrying out the exclusive OR between data of said fourth route and data of said third route; 

a third exclusive-OR circuit provided in said third route, for carrying out the 
exclusive OR between the ou^ut of said second exclusive-OR circuit and the output of said first 
exclusive-OR circuit; 

a fourth circuit-OR circuit provided in said second route, for carrying out the 
exclusive OR between the output of said first exclusive-OR circuit and the output of said third 
exclusive-OR circuit; 

a fifth exclusive-OR circuit provided in said first route, for canying out the 
exclusive OR between the data of said first route and the output of said fourth exclusive-OR 
circuit; and 

a sixth exclusive-OR circuit provided in said fourth route, for carrying out the 
exclusive OR between the data of said fourth route and the output of said third exclusive-OR 
circuit 
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